Bug 737810 - net ads join requires undocumented option to use kerberos
Summary: net ads join requires undocumented option to use kerberos
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: samba
Version: 6.1
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: rc
: ---
Assignee: Guenther Deschner
QA Contact: Martin Cermak
URL:
Whiteboard:
Depends On:
Blocks: 743047 771375
TreeView+ depends on / blocked
 
Reported: 2011-09-13 07:28 UTC by Marko Myllynen
Modified: 2016-04-10 09:12 UTC (History)
6 users (show)

Fixed In Version: samba-3.5.10-102.el6
Doc Type: Bug Fix
Doc Text:
Cause: The net manpage did not contain documentation for using kerberos authentication. Consequence: Users were not aware how to use kerberos authentication from the net binary. Fix: Manpage update. Result:
Clone Of:
: 771375 (view as bug list)
Environment:
Last Closed: 2011-12-06 16:26:20 UTC

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2011:1519 normal SHIPPED_LIVE samba bug fix update 2011-12-06 00:50:31 UTC

Description Marko Myllynen 2011-09-13 07:28:07 UTC 
Description of problem:
net ads join doesn't use the existing krb5 ticket unless the undocumented -k option is provided. Lack of this documentation is causing great confusion for users (just see how many guide instruct to do "kinit username ; net ads join -U username%password").

# export KRB5CCNAME=/tmp/ticket
# kinit
Password for admin@DOMAIN.EXAMPLE.COM: 
# net ads join
Enter root's password: 
Interrupted by signal.
# net ads join -U admin
Enter admin's password: 
Interrupted by signal.
# net ads join -k
Using short domain name -- DOMAIN
Joined 'SMBTEST1' to realm 'DOMAIN.EXAMPLE.COM
# 

Version-Release number of selected component (if applicable):
samba-common-3.5.6-86.el6_1.4.x86_64
Comment 1 Marko Myllynen 2011-09-13 07:28:46 UTC 
See also https://bugzilla.redhat.com/show_bug.cgi?id=737808.
Comment 6 Guenther Deschner 2011-11-25 14:03:55 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Cause: The net manpage did not contain documentation for using kerberos authentication.

Consequence: Users were not aware how to use kerberos authentication from the net binary.

Fix: Manpage update.

Result:
Comment 7 errata-xmlrpc 2011-12-06 16:26:20 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2011-1519.html
Note You need to log in before you can comment on or make changes to this bug.